Lucene search

UbuntuUSN-1026-1

HistoryDec 07, 2010 - 12:00 a.m.

Python Paste vulnerability

2010-12-0700:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

69.9%

JSON

Releases

Ubuntu 10.04

Packages

paste -

Details

It was discovered that Python Paste did not properly sanitize certain
strings, resulting in cross-site scripting (XSS) vulnerabilities. With
cross-site scripting vulnerabilities, if a user were tricked into viewing
server output during a crafted server request, a remote attacker could
exploit this to modify the contents, or steal confidential data, within
the same domain.

OSVersionArchitecturePackageVersionFilename
Ubuntu10.04noarchpython-paste< 1.7.2-4ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	10.04	noarch	python-paste	< 1.7.2-4ubuntu1.2	UNKNOWN

References

ubuntu.com/security/CVE-2010-2477

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

69.9%

JSON

Related for USN-1026-1